Messages

1

Zenarmor (Sensei) / Re: Attention: Zenarmor Fresh Installation with ECS on OPNsense 24.1.7

« on: May 17, 2024, 06:45:38 pm »

[...]
pkg install -fy os-sensei
[...]

i updated today to 24.1.7 and zenarmor 1.17.2 at the same time, is it recommend to do this or am i fine?
It is currently running fine without any logbook records.

2

23.7 Legacy Series / Re: Still unable to get 1500 mtu on pppoe on 23.7.5 no matter what I do. Why?

« on: September 30, 2023, 03:54:25 pm »

from day one wit my current ISP i have this setting:
Physical NIC: 1512
PPoE vlan: 1508
WAN: 1500

this was working until the 23.7 release. didn't change anything with it.
after upgrade to 23.7.5 and a reload of WAN, MTU is now working again at 1500, without changing any configuration.
so, for me its works fine, Thnx OPNsense Team!

3

General Discussion / Re: Suricata pppoe connection, no longer alerts?

« on: January 11, 2023, 05:41:01 pm »

it's in netmap, not suricata.
Suricata and Zenarmor use netmap

4

General Discussion / Re: Suricata pppoe connection, no longer alerts?

« on: January 11, 2023, 01:20:43 am »

IDS means, its only detecting it, not blocking.
Blocking only happens with IPS..

IPS: intrusion prevention system
IDS: intrusion detection system

5

General Discussion / Re: Suricata pppoe connection, no longer alerts?

« on: December 26, 2022, 11:30:03 am »

i don't know if you need to enabled it, but on my system its enabled and Suricata works fine on a PPPoE connection

6

Dutch - Nederlands / Re: IPv6 met KPN-EB 10A

« on: December 25, 2022, 04:03:15 pm »

hoe heb je Lan ingesteld? deze staat op track interface en die staat weer ingesteld op Wan?
OPNsense kan overigens ook gewoon rechtstreeks op KPN glasvezel worden aangesloten, kun je de draak van een v10A ook weer in de doos proppen

7

General Discussion / Re: Suricata pppoe connection, no longer alerts?

« on: December 25, 2022, 03:56:29 pm »

IPS doesn't work with PPPoE, Only IDS works.

8

22.7 Legacy Series / Re: Port forward anti lockout rule is on wrong interface

« on: December 02, 2022, 01:40:02 pm »

under: > System > Settings ? Administration. then change the 'Listen Interfaces' under Web GUI and Secure Shell

9

22.7 Legacy Series / Re: None of my VLAN interfaces are working after upgrade to 22.7

« on: July 28, 2022, 06:14:15 pm »

i had the same problem, after changing VLAN Hardware Filtering from Disabled to Default and reboot its working again.
hardware checksum offload was already disabled.

i use PPPoE with vlan on a intel nic with IX driver

10

22.1 Legacy Series / Re: Upgrade to 22.1.4_1 no IPv6 connectivity

« on: April 09, 2022, 02:59:21 pm »

Thanks for chiming in on the wrong issue. I have to reiterate that this isn't helpful.


Cheers,
Franco

if this is the wrong issue, which one is the right?
today i found out that when i change the Router Advertisements from 'managed' to 'assisted' my desktop is getting a fully working IPv6, were on 'managed' it only got the ipv6 dns server info but no working ipv6 connection...
i would love to help, but i have no clue were to start

11

22.1 Legacy Series / Re: Upgrade to 22.1.4_1 no IPv6 connectivity

« on: April 08, 2022, 06:20:10 pm »

21.1.5 broke my ipv6 config.
when untick the 'Allow manual adjustment of DHCPv6 and Router Advertisements', my desktop is getting an ipv6 address, but this will break my android phone wifi connection...
also, when ssh into opnsense wan/pppoe is showing a ipv6 address what is in use by one of the lans.
the GUI dashboard is showing a fe80 address...

before 21.1.4 everything was fine!

logbook is showing this:

Code: [Select]

2022-04-08T17:48:13 Error opnsense /usr/local/etc/rc.newwanipv6: On (IP address: 2XXX:XXXX:XXXX:1:92e2:XXXX:fe0e:3874) (interface: WAN[wan]) (real interface: pppoe1).
2022-04-08T17:48:13 Error opnsense /usr/local/etc/rc.newwanipv6: IPv6 renewal is starting on 'pppoe1'
2022-04-08T17:48:12 Error opnsense /interfaces.php: Warning! dhcpd_radvd_configure(auto) found no suitable IPv6 address on igb0
2022-04-08T17:48:12 Error opnsense /interfaces.php: Warning! dhcpd_radvd_configure(manual) found no suitable IPv6 address on ix0_vlan9
2022-04-08T17:48:12 Error opnsense /interfaces.php: Warning! dhcpd_radvd_configure(manual) found no suitable IPv6 address on ix0_vlan1337
2022-04-08T17:48:12 Error opnsense /interfaces.php: Warning! dhcpd_radvd_configure(manual) found no suitable IPv6 address on mlxen0
2022-04-08T17:48:12 Error opnsense /interfaces.php: Warning! dhcpd_dhcp6_configure() found no suitable IPv6 address on opt5
2022-04-08T17:48:12 Error opnsense /interfaces.php: Warning! dhcpd_dhcp6_configure() found no suitable IPv6 address on opt6
2022-04-08T17:48:12 Error opnsense /interfaces.php: ROUTING: skipping IPv6 default route
2022-04-08T17:48:12 Error opnsense /interfaces.php: ROUTING: IPv6 default gateway set to wan
2022-04-08T17:48:12 Error opnsense /interfaces.php: ROUTING: skipping IPv4 default route
2022-04-08T17:48:12 Error opnsense /interfaces.php: ROUTING: IPv4 default gateway set to wan
2022-04-08T17:48:12 Error opnsense /interfaces.php: ROUTING: entering configure using 'opt7'

logbooks are bit bit broke, the dhcp4 logbook is empty, but going from the syslogbook widget from the desktop i can get more... had the change the filter options to show everything...

12

22.1 Legacy Series / Re: Upgrade to 22.1.4_1 no IPv6 connectivity

« on: April 02, 2022, 12:21:16 am »

I, too, have a PPPoE internet connection, and I'm having the same issues with IPV6 sometimes working and sometimes not. I noticed that the ssh/terminal screen shows different info than the GUI dashboard, as can be seen in the screenshots. Could this be related?

i have the same thing after i swap the Intel x540T2 for a Intel x520 SR, wan pppoe has the same ipv6 ip as one of the local lan networks, for me its currently using my pi-hole vlan what resulting in weird dns issues.
when turn off the pi-hole network interface, wan pppoe got an another ipv6 address from one of the enabled lan networks...
can't put the x540 back in because its broken...

before the swap it was just a fe80 address like the gui is showing... (which works create!)

13

Zenarmor (Sensei) / Re: 1.11 release date

« on: April 02, 2022, 12:13:08 am »

well i found out that you cant use a 1.10 backup... zenarmor is telling me the backup is to old, version 0.
guess i have to do a fresh start

14

22.1 Legacy Series / Re: Plugins issues.

« on: March 29, 2022, 04:08:28 pm »

after installing 'os-sunnyvalley', you have to install 'os-sensei' to get Zenarmor installed.

"os-sunnyvalley" is the repository where "os-sensei" is Zenarmor...

15

22.1 Legacy Series / Re: No traffic on LAN?

« on: March 24, 2022, 10:34:50 pm »

i have the same problem, but i'm using the IX driver. (intel X540-t2)
it started on 22.1 and its not daily, today opnsense was stable for 5+ days. most of the time this error arise in the mornings, but not today...

for me it's all the interfaces on IX0 (Lan + vlans) , IX1 (WAN) and igb0 (other network) are fine.
only solution to get opnsense back online is by push the power button.

part i found in the logbook:

2022-03-24T21:01:57   Error   opnsense   /usr/local/etc/rc.bootup: The command '/usr/sbin/ngctl msg 'ix1_vlan6': setautosrc 1' returned exit code '71', the output was 'ngctl: send msg: No such file or directory'   
2022-03-24T20:58:27   Error   opnsense   /usr/local/etc/rc.linkup: Warning! dhcpd_dhcp4_configure() found no suitable IPv4 address on opt6   
2022-03-24T20:58:27   Error   opnsense   /usr/local/etc/rc.linkup: Warning! dhcpd_dhcp4_configure() found no suitable IPv4 address on opt5   
2022-03-24T20:58:26   Error   opnsense   /usr/local/etc/rc.linkup: ROUTING: skipping IPv6 default route   
2022-03-24T20:58:26   Error   opnsense   /usr/local/etc/rc.linkup: ROUTING: IPv6 default gateway set to wan   
2022-03-24T20:58:26   Error   opnsense   /usr/local/etc/rc.linkup: ROUTING: skipping IPv4 default route   
2022-03-24T20:58:26   Error   opnsense   /usr/local/etc/rc.linkup: ROUTING: IPv4 default gateway set to wan   
2022-03-24T20:58:26   Error   opnsense   /usr/local/etc/rc.linkup: ROUTING: entering configure using 'opt7'   
2022-03-24T20:58:26   Error   opnsense   /usr/local/etc/rc.linkup: DEVD: Ethernet attached event for dynamic opt7(ix0_vlan9)   
2022-03-24T20:58:25   Error   opnsense   /usr/local/etc/rc.newwanip: On (IP address: 10.0.3.1) (interface: MainLAN[lan]) (real interface: ix0).   
2022-03-24T20:58:25   Error   opnsense   /usr/local/etc/rc.newwanip: IPv4 renewal is starting on 'ix0'   
2022-03-24T20:58:25   Error   opnsense   /usr/local/etc/rc.linkup: DEVD: Ethernet attached event for static lan(ix0)   
2022-03-24T20:58:24   Error   opnsense   /usr/local/etc/rc.linkup: DEVD: Ethernet detached event for dynamic opt5(ix0_vlan1337)   
2022-03-24T20:58:22   Error   opnsense   /usr/local/etc/rc.linkup: DEVD: Ethernet detached event for dynamic opt6(ix0_vlan15)   
2022-03-24T20:58:22   Error   opnsense   /usr/local/etc/rc.linkup: DEVD: Ethernet detached event for static opt3(ix0_vlan13)   
2022-03-24T20:58:22   Error   opnsense   /usr/local/etc/rc.linkup: DEVD: Ethernet detached event for static opt2(ix0_vlan12)   
2022-03-24T20:58:22   Error   opnsense   /usr/local/etc/rc.linkup: DEVD: Ethernet detached event for static opt1(ix0_vlan11)   
2022-03-24T20:58:21   Error   upsmon   upsmon parent: read   
2022-03-24T20:58:20   Error   opnsense   /usr/local/etc/rc.linkup: DEVD: Ethernet detached event for dynamic opt7(ix0_vlan9)   
2022-03-24T20:58:19   Error   opnsense   /usr/local/etc/rc.linkup: DEVD: Ethernet detached event for static lan(ix0)   
2022-03-24T20:58:16   Error   upsmon   UPS [ups@10.0.37.2:3493]: connect failed: Connection failure: Operation already in progress   
2022-03-24T20:57:15   Error   upsmon   UPS [ups@10.0.37.2:3493]: connect failed: Connection failure: Operation timed out   
2022-03-24T20:55:55   Error   upsmon   Poll UPS [ups@10.0.37.2:3493] failed - Server disconnected

whats weird, the NUT services disconnected at 20:55:55
the first DEVD error starts at 20:58:19

note; i use ZENARMOR only on IX0